In my requirements there is just "128-bit encryption at a minimum" mentioned about security. And availability five nines.
Question is: should I show in my deployment diagram a firewall ? And if yes, should the firewall have a hot standby?
What do you think?
I would say HA means more than one of the same, 128-bit encryption most surely means SSL (https:// for the protocol), and a firewall that only allows incoming traffic on certain ports is certainly like a boon in that scenario.
With best regards,
Anton Golovin (email@example.com) SCJP, SCJD, SCBCD, SCWCD, OCEJWSD, SCEA/OCMJEA [JEE certs from Sun/Oracle]